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in the Claims: 

Please cancei Claims 1-3, aii as shown beiow. Applicant respectfully reserves the right to 
prosecute any originally presented or canceled claims in a continuing or future appiication. 

1 - 3. (Canceled) 

4, (Withdrawn) A software product having manufactured instructing signals for 
instructing an instructabie machine to carry out a fiie characterizing and processing method 
including deciding how to respond to an access request for accessing data of an identified fiie, 
where the fiie is identified as primarily residing on a given media, the machine- implemented 
characterizing and processing method comprising: 

(a) first determining if the identified file is an access-constrained one, and if not, allowing 
unconstrained access to the data of the identified file; 

(b) second determining if the identified fiie is one covered by OTF recryption processing, 
and if not, allowing recryption-free access to the data of the identified fiie; 

(c) third determining if the identified file is one covered by bubble protection processing, and 
if not, allowing bubble-free access to the data of the identified fiie; 

(d) if the identified file is one covered by bubble protection and/or OTF recryption 
processing, fetching from the given, primary- residence media of the fiie, permission-control signals 
for use by the OTF recryption processing and/or bubble protection processing in determining 
whether to respectively grant decrypted access or any access to the data of the identified file: 

(e) if the given, primary-residence media of the identified file is external to, or easiiy 
removable from a protective housing of said instructabie machine, transparently and temporarily 
localizing within the protective housing, a copy of the permission-control signals and a copy of the 
identified file: and 

(f) using the transparently and temporarily localized copies of the identified file and its 
permission-controf signals in responding to local access requests generated from within the 
protective housing of the instructabie machine. 
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5. (Withdrawn) The software product of Claim 4 wherein said permission-control 
signafs are digitally- signed and consistently stored in a predefined directory of the primary- 
residence media of the fife. 

6. (Withdrawn) A machine-implemented method for responding to file-opening 
requests submitted to a local machine having ioca! securing means for physicaiiy securing stored 
data, said method comprising: 

(a) first determining if a fife that is to-be-opened per a submitted request is a resident of a 
remote or easify-removabie media and if so, whether such a locally-nonresident and requested file 
is iogicaiiy associated with access-constraining rules (AC-ruies aiso stored remoteiy or on easily- 
removable media; and 

(b) if respective localized versions of the requested, iocafSy-nonresident, and AC-associated 
fife or of the fife's logicaiiy-associated AC-ruies are not already physicaiiy secured within the local 
securing means of the ioca! machine, respectively and securely importing copies of the locaiiy- 
nonresidentfiie and/or of the fife's iocaffy-nonresident AC-ruies into the local securing means of the 
local machine. 

7. (Withdrawn) The machine-implemented method of Claim 6 wherein said secureiy 
importing step incfudes: 

(b.1) conducting a digital signature check on a Socaily- nonresident AC-ruies copy before 
aiiowing such a, being-imported AC-rules copy io be deemed as being securely-imported and 
locally-resident. 



8. (Withdrawn) The machine-implemented method of Claim 7 wherein said secureiy 
importing step incfudes: 
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(b.2) conducting a digital signature check on a iocaSiy- nonresident and AC- associated fiie 
copy before allowing such a, being-imported file copy to be deemed as being securely-imported 
and iocaiiy-resident. 

9. {Withdrawn) The machine-implemented method of Claim 8 wherein said step of 
securely importing a locally-nonresident and AC-assoctated fiie copy is characterized by 

{b.2a} causing the digital signature check to be carried out on a plaintext version of the file 
copy even where the imported fiie copy is encrypted. 

10. {Withdrawn) The machine-implemented method of Claim 6 wherein said securely 
importing step is characterized by. 

(b.1 ) not transmitting between the remote or easily-removabie media and the local securing 
means, a plaintext version of confidential information represented by the locally-nonresident fiie 
while said copy of the file is being securely imported. 

1 1 . {Withdrawn) The machine-implemented method of Claim 6 wherein said securely 
importing step is characterized by. 

(b.t) not creating in the locai machine, a nonvolatile, plaintext version of confidential 
information represented by the iocaliy- nonresident fiie while or after said copy of the file is securely 
imported. 

12. {Withdrawn) The machine-implemented method of Claim 8 wherein said locally- 
nonresident and requested fiie and its logically associated AC-ruies are consistently stored together 
on a same removable medium or in a same remote machine even as the primary residence of the 
locaily-nonresident and requested fiie migrates from one place to another, and said first determining 
step includes: 

(a 1 ) looking for the logically-associated AC-rules in a predefined foider of the primary 
residence place of the locally-nonresident and requested file. 
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13. (Withdrawn) The machine-impiemented method of Claim 6 and further comprising: 

(c) using the localized copies of the requested file and its AC- rules for carrying out file 
access operations, where said file access operations can include gaining bubble- protected access 
to the data of the file copy and/or gaining intelligible access to the information of encrypted data ; 
if any, withing the file copy ; provided that authorization to do so is present. 

14. (Withdrawn) The machine-implemented method of Claim 13 and further 
comprising: 

(d) after iocai use of the localized copies of the requested fiie and its AC-ru!es is complete, 
deieting the iocai copies if they had not been modified, or otherwise de-localizing a modified version 
of the fiie copy if authorized and permitted modification had taken place, where said de-locaiizing 
includes sending the modified version (which may be appropriately encrypted prior to transmission) 
back to the remote or easily-removable media form which the original file was copied from or 
sending the modified version to a new place of primary residence. 

15. (Withdrawn) The machine-impiemented method of Claim 13 and further 
comprising: 

(d) during local use of the localized copies of the requested fiie and its AC-ruies, tracking 
the availability of the remote or easily-removable media that stores the locally-nonresident and 
requested fiie; and 

(e) if said tracking indicates the remote or easiSy-removabie media is unavailable or a link 
to a remote machine containing said remote or easiiy-removable media is down, refusing an access 
request to the fiie even though the iocaiized copy is locally available, said refusal creating an 
illusion that the fiie being used is the external one rather than the iocaiized copy. 
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16. (Withdrawn) A fifes management method for managing access -constrained fiies 
and data representing their corresponding access-constraining rules (AC-rules), said management 
method comprising: 

(a) keeping said access-constrained fiies and the data of their respective, iogicaiiy 
associated AC-rules consistently stored together on a same removable medium or in a same 
remote machine even as the piace of primary residence of the access-constrained files migrates 
from one piace to another, 

17. (Withdrawn) The files management method of Claim 16 and further comprising: 

(b) keeping said iogicaiiy associated AC-rules consistently stored in a predefined folder of 
the primary residence piace of the corresponding access-constrained files. 

18. (Withdrawn) The files management method of Claim 16 and further comprising: 
(b) providing a file-request handier at the primary residence piace of the corresponding 

access-constrained files for keeping track of the logically associated AC-rules that correspond with 
specific ones or sets of the access-constrained files. 

19. (Withdrawn) A software product having signals defining a file- use record, where 
the fiie-use record is for use in a local machine that can respond to file-opening requests submitted 
to the loca! machine, where the local machine has loca! securing means for physically securing 
stored data therein, including localized copies of non-resident fiies that reside primarily on remote 
or easily-removabie media and are subject to access-control rules, and where the file- use record 
of said software product comprises at least one of: 

(a) a channel status field for indicating whether a communications channel to the media of 
a corresponding, non-resident file is currently operative or not; 

(b) a media availability status field for indicating whether the media of a corresponding, non- 
resident file is currently removed or not; 

(cj a media locality fieid for indicating whether the media of a corresponding file is native or 
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a not-permanently- resident one; 

(d) a first section for keeping track of current, access-constraining states associated with 
the locally-native or temporarily localized file; 

(e) a second section for keeping track of current usage by local application programs of the 
locally-native or temporarily localized file that is subject to access constraining; and 

(f) a third section for keeping track of the primary residence location of the temporarily 
localized file. 

20, (Withdrawn) A network system having a files management subsystem for 
managing localized access to access-constrained files where the access-constrained files each 
have a primary place of residence within the network and have corresponding access-constraining 
rules (AC- rules) defined by data stored at the corresponding primary place of residence of the 
respective files, said network system comprising. 

(a) a plurality of file-servers and/or storage media units coupled to a network; 

(b) at least one client coupled to the network for accessing file data of files stored on the file- 
servers and/or storage media units, where the at least one client includes: 

(b.1) local securing means for physically securing stored data; 

(b 2) importing means for securely importing copies of locally-nonresident file and/or 
of the file's locally-nonresident AC-ruies into the local securing means of the client; and 

(b.3) local constraining means for constraining access to data of locally-resident files 
and/or of imported local copies of said locally- nonresident files in accordance with 
corresponding locally-resident AC-ruSes and/or imported local copies of said locally- 
nonresident AC-ruies 

21. (Withdrawn) The network system of Claim 20 wherein the at least one client 
includes: 
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(b.4) exporting means for securely exporting the data of locally-modified copies of 
locally-nonresident files to their corresponding primary places of residence within the 
network. 

22. {Withdrawn) The network system of Claim 21 wherein the at least one client further 
includes: 

(b.4a) export delay means for keeping track of how many local application programs, 
if any, are still reading or trying to further modify the locally- modified copies of locally- 
nonresident files, and for delaying said secured export of the data of the locally-modified 
copies even after a currently-modifying, local application program finishes using the locally- 
modified copies. 

23 (Withdrawn) The network system of Clatm 22 wherein said access-constraining 
ruies include at least one of 

(d 1 ) OTF recryption rules 

(d 2) bi-directional Bubble-protection rules, 

(d 3) uni-dfrecttonai Bubble-protection ruies (e g , those that allow write-only access but not 
read-only access or vice versa), and 

(d 4) user-ID based access-constraining ruies 

24 (Withdrawn) The network system of Clatm 20 wherein said access-constraining 
rules include at least one of 

(d.1) OTF recryption rules; 

fd 2) bi-directional Bubble-protection rules, 

(d 3) uni-directiona! Bubble- protection ruies {e g those that allow write-only access but not 
read-only access or vsce versaV and 

(d 4) user- ID based access-constratntng ruies 
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25. (Withdrawn) The network system of Claim 20 wherein said files management 
subsystem includes; 

(c) migration control means for keeping said access-constrained files and the data of their 
respective, logically associated AC-rules consistently stored together on a same removable medium 
or in a same server even as the place of primary residence of the access-constrained files migrates 
from one place to another. 

26. (Withdrawn) A client machine for use in a network system having files defined as 
access-constrained files where the access-constrained files each have a primary place of 
residence within the network and have corresponding access-constraining rules (AC-ruies) defined 
by data stored at the corresponding primary place of residence of the respective files, said client 
machine comprising: 

(a) importing means for securely importing copies of locally-nonresident fiies and/or of the 
files' locally-nonresident AC-ruies from the network and into the client machine; and 

(b) local constraining means for constraining access to data of locally-resident files and/or 
of imported local copies of said iocaSiy-nonresident fiies in accordance with corresponding iocally- 
resident AC-rules and/or imported local copies of said locally-nonresident AC-rules. 

27. (Withdrawn) The client machine of Claim 26 wherein said local constraining means 
includes; 

(b. 1) a decryption unit for providing intelligible access to information of encrypted ones of 
said access-constrained files; 

(b.2) fiow-blocking switches for biocking the flow of file data either directly to a requesting 
application program or indirectly by way of said decryption unit to the requesting application 
program; 

(b.3) a permissions control module that controls said flow-blocking switches to thereby block 
ail access by the requesting application program to the requested file data, or to block intelligible 
access to information of encrypted portions, if any. of the requested file data, or to grant 
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nondecrypted access to the data of the requested file data, or to grant inteiiigibie access to the 
encrypted portions, if any, of the requested fiie data; 

(b.4) a local and physicaiiy- secured permission-ruies storing memory that stores iocal 
AC-ruies and/or copies of securely imported ones of locally- nonresident AC-ruies, where the stored 
AC-ruies are usable for governing the actions of the permissions control moduie. 

28, (Withdrawn) The ciient machine of Claim 26 wherein said AC-ruies can govern the 
actions of the permissions control moduie on the basis of at ieast one or more of: 

(b.4a) temporary based constraints regarding the time that access is requested to a 
corresponding, access-constrained fiie; 

(b.4b) geographically based constraints regarding the location from which a request is 
generated for access to a corresponding, access-constrained file, 

(b.4c) machine identification based constraints regarding the unique identification of the 
machine from which a request issued for access to a corresponding, access-constrained file; 

(b.4d) program identification based constraints regarding the unique identification of the 
executing program or programs whose actions ied to a request being issued for access to a 
corresponding, access-constrained fiie; 

(b.4e) user identification based constraints regarding the unique identification of one or more 
human users whose recent actions ied to a request being issued for access to a corresponding, 
access-constrained file; and 

(b.4f) navigation- path based constraints regarding the unique way in which a path was 
navigated to point to the access-constrained fiie for which a request was issued for access to 
corresponding file data. 

29. (Withdrawn) The client machine of Claim 28 and further comprising: 

(c) a ubiquitous navigating mechanism for seamiessiy pointing to externa! fiies stored on 
the network or on externaiizabie media, as easiiy as for pointing to iocaiiy stored files so that a 
novice user can be ieft unaware of what is the primary piace of residence of a pointed-to fiie, 

Alwrocy DotU-f No. : SYMA-0 1O45US0 8RM/DTX 
tt»i^tvp,'8ym*-KW5us0/Repfy to OA maikd 7-1 8-06 



10 



Application No.; 09/934,926 
Response to OA dated: JuSy 1 8, 2006 
Response dated: October 18, 2008 



30, (Withdrawn) The client machine of Claim 26 wherein said iocai constraining means 
includes: 

(b.1) volatile storage means for temporarily storing plaintext data derived from a selected 
one the two or more digital data files; and 

(b.2) volume-encryption means for decrypting confidential data portions of a selected one 
of said access-constrained, digital data files and for transmitting the decrypted confidential data to 
the volatile storage means after local approval for such intelligible access is locally granted, 

31 , (Withdrawn) The client machine ofClaim 26 wherein said local constraining means 
includes: 

(b.1) bubble-control means which intercepts file-OPEN requests made by identifiable, 
requesting programs for access to data of an access-constrained file and determines whether or 
not to approve access to the data of the file based on at least one of the following, user- ID 
independent factors: 

(b.1 a) identity of the requesting application program; 

(b. 1 b) when the file-OPEN request is made; 

(b.1c) location from where the file-OPEN request is made; 

(b.1d) unique identity of the client machine such as serial number; and 

(b.1 e) whether the request is a unidirectional, read-only or write-oniy type of 
request. 

32, (Withdrawn) The client machine of Claim 31 wherein. 

(b.1 f) the bubble-control means posts a security alert message to the network upon denial 
of a file-OPEN request by the bubble-control means 

33 (Previously presented) An instruction conveying means for instructing an 
mstructabie machine to carry out an access-constraining method for files that reside either inside 
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or outside the instructabie machine, where the instructabSe machine has an internal : data- providing 
means thai can provide data from an identified one of interna! or external, plural digital data fiies 
in response to interceptable file-access requests, where each of said fiies is identifiable by a file 
name, said machine-implemented, access-constraining method being for protecting data and/or 
information of said fiies from unauthorized access by way of unauthorized ones of identifiable 
programs and/or at the behest of unauthorized, identifiable users, said internal/external access- 
constraining method comprising; 

(a) intercepting data access attempts made by access requesting programs for data in an 
identified one of fiies residing on an identified internal, removable, or external media; 

(b) first testing for each intercepted data access attempt, to verify that the identified media 
on which the requested file resides is currently available, and if not, updating local records which 
track the current availability of the identified media to indicate the current non-availability of the 
media; 

(c) second testing for each intercepted data access attempt, to determine if access 
constraining control information is already available internally for the identified file; 

(d) if said second testing shows that the access constraining control information is not 
available in an internal and physically-secure storage area, attempting to securely import the 
missing, access constraining control information from the removable, or external media of primary 
residence of the identified file; 

(e) if said import attempt shows that the missing, access constraining control information 
is unavailable, determining explicitly or implicitly if the missing information is necessary for allowing 
the intercepted access-request to complete normaiiy to provide a grant of the request, and if the 
missing information is necessary, blocking the intercepted access-request from completing normaiiy 
and thereby blocking the provision of said grant in response to the intercepted access-request 

34. (Original) The instructions conveying means of Claim 33 and further wherein 
said step {6) of attempting to securely import the missing, access constraining control information 
includes at least one of: 

S\ n.i t(!4\tN<! l\ph UOVn .nkd !(-<*■ 
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(ci.1) verifying a digital signature covering corresponding access constraining control 
information thai is held in said removable, or external media of primary residence of the identified 
fife and imported into said instructabie machine; 

(d.2) decrypting imported digital data that represents the corresponding access constraining 
control information of the identified file; and 

(6.3) storing a digital-signature authenticated and/or decrypted, plaintext version of the 
missing, access constraining control information in said internal and physically- secure storage area 
of the instructabie machine. 

35. (Previously presented) The instructions conveying means of Claim 33 and 
wherein said internal/external access-constraining method further comprises. 

(f) third testing for each intercepted data access attempt, to determine if the identified file 
is an access constrained one which resides on removable, or external media, and if so to determine 
whether a localized copy of the identified file is present in the instructabie machine; 

(g) if said third testing shows that the localized copy is not present, importing a copy of the 
identified file into said internal and physically-secure storage area of the instructabie machine. 

36. (Original) The instructions conveying means of Claim 35 and wherein said 
internal/external access-constraining method further comprises: 

(h) recording the time of said importing of the copy of the identified file so that said time of 
localization can be later used by garbage collection mechanisms of the instructabie machine to 
remove localized copies that have remained localized beyond a predefined time limit. 

37. (Original) The instructions conveying means of Claim 35 and wherein said 
internal/external access-constraining method further comprises: 

(h) determining if the just-localized file copy imported in step (g) is one whose primary data 
is encrypted; 

(i) attempting to decrypt the encrypted primary data of the just- localized file copy if the 
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determining step (h) shows that such encrypted data is present: and 

(j) blocking the intercepted access-request from completing normaiiy and thereby blocking 
the provision of said grant in response to the intercepted access- request if the attempted decryption 
of step (i) is unsuccessful. 

38. (Original) The instructions conveying means of Claim 37 and wherein said 
internal/external access-constraining method further comprises: 

(k) attempting to verify a digital signature covering the decrypted primary data of step (i); and 
(i) blocking the intercepted access-request from completing normally and thereby blocking 

the provision of said grant in response to the intercepted access- request if the signature verification 

of step (k) is unsuccessful. 

39. (Original) The instructions conveying means of Claim 37 and wherein said 
internal/external access-constraining method further comprises: 

(k) volume encrypting the decrypted primary data of step (i) and storing the volume 
encrypted data to nonvolatile storage; 

wherein the decrypted primary data is kept within the instructable machine exclusively in 
volatile storage thereof. 

40. (Previously presented) An instructions conveying means for instructing an 
instructable machine to carry out an nonresident file-closing method for files that reside removably 
or outside the instructable machine, where the instructable machine has an internal, data-providing 
means that can provide data from an identified one of internal or external piurai digital data files 
in response to interceptabie file-open requests, where each of said files is identifiable by a file 
name, said machine-implemented, file-closing method being for protecting data and/or information 
of said nonresident files from unauthorized access by way of unauthorized ones of identifiable 
programs and/or at the behest of unauthorized, identifiable users, said nonresident file-closing 
method comprising. 
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(a) intercepting file-closing attempts made by access-completing parts of access-requesting 
programs, where the original access requests were for data in an identified one of fiies residing on 
an identified internal, removable, or externa! media, 

(b) first testing for each intercepted file-closing attempt, to verify that the identified media 
on which the to-be-closed file resides is currently available, and if not updating ioca! records which 
track the current availability of the identified media to indicate the current nonavailability of the 
media; 

(c) second testing for each intercepted file-closing attempt, to determine if access 
constraining control information is available internaiiy for the identified fiie; 

(d) if said second testing shows that the access constraining control information is not 
available in an internal and physicaiiy-secure storage area, determining explicitly or implicitly if the 
missing, access constraining control information must be iocally present for allowing the intercepted 
file-ciosing request to complete normally, and if the missing information is necessary, blocking the 
intercepted file-closing request from completing normally in response to the intercepted file-closing 
request. 

41 . (Original) The instructions conveying means of Claim 40 and wherein said 
nonresident fiie-ciosing method further comprises: 

(e) third testing the locally-present, access constraining control information for the to-be- 
ciosed file to determine if the access constraining rules for the identified fiie permit a current attempt 
to close the file: and 

(f) blocking the intercepted file-ciosing request from completing normally if said third testing 
step (e) indicates the locally-present, access constraining control information for the to-be-closed 
file do not permit a current attempt to close the fiie. 

42. (Original) The instructions conveying means of Claim 41 and wherein said 
nonresident file-ciosing method further comprises: 

Attonwsv Dotfcsf No. : SYMA-0 1045USO 8RM/DTX 
tt»i^tvp,'8vm*-KW5us0/RepW to OA majkd 7-1 8-06 



15 



Application No.; 09/934,926 
Response to OA dated: JuSy 1 8, 2006 
Response dated: October 18, 2008 



(g) determining if other iocai, application programs are still using the localized file copy, and 
if so, fooling the file-closing requesting application program into to thinking the nonresident original 
of the identified file has been closed, even though said nonresident original has not yet been 
closed, 

43. (Original) The instructions conveying means of Claim 42 and wherein the 
nonresident file-closing method further comprises: 

(h) if no other local, application programs are still using the localized file copy, determining 
if the localized file copy has been modified locally; and 

(i) if said determining step (h) shows that the localized file copy has not been modified 
locally, allowing the intercepted file- closing request to complete normally, thereby causing a file- 
close action to occur for the nonresident file identified in a counterpart, file-opening request. 

44. (Original) The instructions conveying means of Claim 43 and wherein the 
nonresident file-closing method further comprises: 

(|) tn conjunction with said step (i) of allowing the requested file-close action to occur for the 
nonresident file, deleting the localized file copy. 

45. (Original) The instructions conveying means of Claim 44 and wherein the 
nonresident ftle-closing method further comprises: 

(k) in conjunction with said step (i) of allowing the requested file-close action to occur for 
the nonresident file, determining if any other, temporarily localized filed copies (TTL'ed files) are 
logically associated with the localized copy of the access constraining rules of the to-be-closed file, 
and if not, deleting the localized copy of the access constraining rules of the to- be- closed file. 

46 (Original) The instructions conveying means of Claim 43 and wherein the 
nonresident file-closing method further comprises 
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(j) if said determining step (h) shows that the localized file copy has been modified locally, 
overwriting the modified local copy to the nonresident, originai iocation before aiSowing the 
intercepted file-closing request to compiete normally, thereby causing a file-close action to occur 
for the nonresident file identified in a counterpart, file-opening request only after the nonresident 
file has been updated in accordance with the Socaily-made modifications. 

47. (Original) The instructions conveying means of Claim 41 and wherein the 
nonresident file-closing method further comprises: 

(e) in response to a denial of the requested file-closing, posting a correspondingly security 
alert message. 

48. (Original) in an automated machine for executing one or more application 
programs, where the application programs access file data of a plurality of locally and externally 
stored files by causing interceptable fiie-OPEN requests and fiie-CLOSE requests to be sent to an 
operating system of said machine, and where data within a subset of the plurality of stored fifes is 
encrypted or otherwise access constrained; an automatic access constraining control mechanism 
comprising: 

(a) OPEN intercept means for intercepting said interceptable fiie-OPEN requests; 

(b) selective OPEN continuance means, responsive to the OPEN intercept means, for 
determining whether an intercepted fiie-OPEN request is requesting an open of a file for which the 
request is to be denied based on associated access constrain rules; 

(c) local-use tracking means , responsive to the selective OPEN continuance means, for 
determining whether a localized copy of a to-be-opened, nonresident file, and a localized copy 
of nonresident access constraining rules associated with the to-be-opened, nonresident file, are 
already present in the machine, and if so, for allowing the intercepted file-OPEN request to 
continue on its way to the operating system such that the localized file copy will be accessed if 
so permitted by the localized copy of nonresident access constraining rules; 

(d) CLOSE intercept means for intercepting said interceptable fiie-CLOSE requests; and 
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(e) selective CLOSE continuance means, responsive to the OPEN intercept means, for 
determining whether an intercepted file-CLOSE request is requesting a closing of a file for which 
the CLOSE request is to be denied based on associated access constrain ruies. 

49. (Original) The instructions conveying means of Claim 41 and wherein said 
nonresident file-closing method further comprises: 

(g) determining if the to-be-closed file is a special-use one such that, even if there are no other 
local, application programs still using the localized file copy, stiff fooling the file-closing 
requesting application program into to thinking the nonresident original of the identified file has 
been c!osed : even though said nonresident original has not yet been closed because it is later 
slated for special-use by an application program that has not yet started using the localized file 
copy. 
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